[security-alerts] FW: [SA25602] D-Link DWL-G650+ Wireless Driver Beacon TIM Buffer Overflow

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> TITLE:
> D-Link DWL-G650+ Wireless Driver Beacon TIM Buffer Overflow
> 
> SECUNIA ADVISORY ID:
> SA25602
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/25602/
> 
> CRITICAL:
> Moderately critical
> 
> IMPACT:
> DoS, System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> D-Link DWL-G650+ Wireless Driver (Rev. A1) 6.x
> http://secunia.com/product/14477/
> 
> DESCRIPTION:
> Laurent Butti has reported a vulnerability in the D-Link DWL-G650+
> wireless driver, which can be exploited by malicious people to cause
> a DoS (Denial of Service) or to potentially compromise a vulnerable
> system.
> 
> The vulnerability is caused due to an error within the handling of
> beacon frames containing an overly long TIM information element and
> can be exploited to cause a buffer overflow via a specially crafted
> packet.
> 
> Successful exploitation may allow execution of arbitrary code.
> 
> The vulnerability is reported in version 6.0.0.18 (Rev. A1). Other
> versions may also be affected.
> 
> SOLUTION:
> Turn off the wireless card when not in use.
> 
> PROVIDED AND/OR DISCOVERED BY:
> Laurent Butti
> 
> ORIGINAL ADVISORY:
> http://www.blackhat.com/presentations/bh-europe-07/Butti/Prese
> ntation/bh-eu-07-Butti.pdf
>